CVE-2026-55240 is a critical vulnerability in the open source Tianji platform prior to version 1.31.29. It involves improper neutralization of special elements in a template engine, allowing a workspace administrator to inject server-side JavaScript code via templates. This code executes in the Node.js process when an unauthenticated user submits a survey response, potentially enabling command execution, secret disclosure, data modification, or service disruption. The issue is fixed in version 1.31.29.
CVE-2026-92982 is a high-severity vulnerability in Red Hat Ansible Automation Platform 2.6's Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection flaw by crafting malicious custom resource specification values. This allows arbitrary code execution within the operator pod and privilege escalation to the operator's service account, which has cluster-wide permissions. The vulnerability arises because Ansible processes these values without proper sanitization, and the default configuration enables template injection. Mitigation involves setting the 'markUnsafe' flag to true in the operator's watches.yaml configuration to prevent template evaluation of custom resource spec fields.
CVE-2026-105474 is a critical server-side template injection vulnerability in WebPros SolusVM 2 up to version 2.0.0-44576. It allows remote authenticated users to execute arbitrary code with root privileges on the affected system. The vulnerability stems from improper neutralization of special elements used in the template engine. The CVSS 4.0 base score is 9.4, indicating a high severity with network attack vector, low attack complexity, and no user interaction required.
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
CVE-2026-108264 is a critical vulnerability in the wizarrrr wizarr application, an advanced user invitation and management system for media servers. Before version 2026.9.1, the application improperly neutralized special elements in its template engine, allowing authenticated users with certain privileges or administrators importing untrusted bundles to execute arbitrary Python code. This occurs due to the evaluation of Markdown in a non-sandboxed Jinja2 environment with application globals exposed. Exploitation can lead to remote code execution, disclosure of sensitive secrets like the Flask SECRET_KEY, access to service credentials and the database, and stored cross-site scripting. The issue is fixed in version 2026.9.1.
Dell Container Storage Modules versions prior to 1.18.0 have a critical vulnerability involving improper neutralization of special elements in a template engine. This flaw allows a low privileged remote attacker to potentially escalate privileges. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality and integrity. No known exploits are reported in the wild. The vulnerability is fixed starting from version 1.18.0.
Craft CMS versions 5.0.0 up to but not including 5.11.0 contain an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can exploit this flaw by submitting specially crafted component classes and property overrides, leading to arbitrary Twig template code execution. This vulnerability allows execution of PHP functions such as system(), resulting in operating system command execution with the privileges of the web server process. The issue does not require admin privileges or access to sensitive settings or files.
CVE-2026-104851 is a high-severity code injection vulnerability in the fsspec filesystem_spec Python library. Versions from 0.9.0 up to but not including 2026.6.0 allow attacker-controlled Kerchunk reference JSON documents to execute arbitrary Python code via unsafe jinja2 template rendering when opening the reference filesystem. This can occur before any referenced data is read and affects multiple code paths depending on document content and options. The issue is fixed in version 2026.6.0.
A critical vulnerability (CVE-2026-90970) in GitLab AI Gateway allows an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a crafted flow configuration, enabling arbitrary command execution. This affects versions from 18.1.6 up to but not including 19.2.4, 19.3 up to but not including 19.3.2, and 19.4 up to but not including 19.4.1. The issue has been fixed in versions 19.2.4, 19.3.2, and 19.4.1.
CVE-2026-53964 is a high-severity vulnerability in adfinis document-merge-service prior to version 9.1.0. It allows remote code execution via server-side template injection in XLSX templates processed by the xltpl library using a non-sandboxed Jinja environment. The flaw enables execution of user-supplied code with the privileges of the document-merge-server user, potentially compromising the container. This issue has been fixed in version 9.1.0.
CVE-2026-102142 is a high-severity vulnerability in the Kiteworks Core appliance where a system notification template is processed by a template engine that evaluates expressions within the template body. An authenticated System Administrator can craft a malicious template that, when the notification is sent, executes operating system commands on the appliance. This vulnerability affects Kiteworks Core versions from initial up to but not including 9.5.1.
CVE-2026-73858 affects the Solspace Freeform plugin for Craft CMS versions 5.0.0 through 5.10.13. It allows unauthenticated attackers to inject Twig expressions into submitted form fields, which are then evaluated by an isolated Twig renderer when rendering HTML attributes. This leads to disclosure of server and environment information such as PHP, operating system, or filesystem path constants. The vulnerability does not expose sensitive globals, environment variables, credentials, arbitrary files, or enable code execution. The issue is fixed in version 5.10.14.
ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution.
Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection.
This issue affects Website Template: through 11092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-19584 is a vulnerability in Rapid7 Velociraptor affecting versions from 0 up to but not including 0.77.2. It involves improper neutralization of special elements in a template engine used during notebook backup restoration. A user with NOTEBOOK_EDITOR permission can inject a VQL query into notebook cell content, which is then evaluated with elevated permissions upon backup restoration.
CVE-2026-33387 is a template injection vulnerability in Nozomi Networks Guardian's Dashboards functionality. It arises from improper validation of an input parameter, allowing an authenticated user with privileges to create or import dashboards containing malicious payloads. When a victim views or imports such a dashboard, the payload executes in their browser context, potentially enabling modification of application data or disruption of availability. The vulnerability affects versions prior to 26.3.0. The CVSS 4.0 score is 5.1, indicating medium severity.
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Twig versions from 1.0.0 up to but not including 3.27.0 contain a vulnerability where the SecurityPolicy::checkMethodAllowed() function unconditionally allows all method calls on instances of Twig\Markup and its subclasses. This flaw allows sandboxed templates to access every public method of Markup-derived objects, bypassing configured method restrictions. The issue was fixed in version 3.27.0.